{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,8]],"date-time":"2026-07-08T01:06:19Z","timestamp":1783472779826,"version":"3.55.0"},"reference-count":207,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"funder":[{"DOI":"10.13039\/501100002347","name":"German Ministry of Education and Research (BMBF) through the Security For Connected, Autonomous caRs (SecForCARs)-Securing Automated VEhicles - Japan-Germany","doi-asserted-by":"publisher","award":["16KIS0796"],"award-info":[{"award-number":["16KIS0796"]}],"id":[{"id":"10.13039\/501100002347","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Access"],"published-print":{"date-parts":[[2023]]},"DOI":"10.1109\/access.2023.3282176","type":"journal-article","created":{"date-parts":[[2023,6,2]],"date-time":"2023-06-02T19:54:29Z","timestamp":1685735669000},"page":"55474-55514","source":"Crossref","is-referenced-by-count":11,"title":["Survey of Model-Based Security Testing Approaches in the Automotive Domain"],"prefix":"10.1109","volume":"11","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-4009-7164","authenticated-orcid":false,"given":"Florian","family":"Sommer","sequence":"first","affiliation":[{"name":"Institute of Energy Efficient Mobility, Karlsruhe University of Applied Sciences, Karlsruhe, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8599-5999","authenticated-orcid":false,"given":"Reiner","family":"Kriesten","sequence":"additional","affiliation":[{"name":"Institute of Energy Efficient Mobility, Karlsruhe University of Applied Sciences, Karlsruhe, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3800-8369","authenticated-orcid":false,"given":"Frank","family":"Kargl","sequence":"additional","affiliation":[{"name":"Institute of Distributed Systems, Ulm University, Ulm, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref57","first-page":"284","article-title":"Model-based security vulnerability testing","author":"salas","year":"2007","journal-title":"Proc Australian Software Eng Conf"},{"key":"ref207","year":"2023","journal-title":"Global Automotive Cybersecurity Report"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1109\/SESS.2007.5"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1002\/spe.2111"},{"key":"ref205","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-66266-4_20"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1109\/ICSTW.2010.54"},{"key":"ref206","doi-asserted-by":"publisher","DOI":"10.7873\/DATE.2015.0622"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/AERO.2014.6836410"},{"key":"ref203","doi-asserted-by":"publisher","DOI":"10.1109\/ICOSEC51865.2021.9591747"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/ICST.2008.9"},{"key":"ref204","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-62579-5_4"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-87875-9_38"},{"key":"ref201","first-page":"2015","article-title":"Remote attacks on automated vehicles sensors: Experiments on camera and LiDAR","volume":"11","author":"petit","year":"2015","journal-title":"Proc Black Hat Eur"},{"key":"ref54","first-page":"1","article-title":"Security testing: A survey","author":"felderer","year":"2016","journal-title":"Advances in Computers"},{"key":"ref202","first-page":"260","article-title":"Adventures in automotive networks and control units","volume":"21","author":"miller","year":"2013","journal-title":"DEF CON"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/HASE.2016.11"},{"key":"ref50","author":"abbors","year":"2012","journal-title":"Applying Model-Based Testing in the Telecommunication Domain"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1002\/stvr.402"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1145\/3020266"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2010.62"},{"key":"ref47","first-page":"204","article-title":"Choosing a test modeling language: A survey","author":"hartman","year":"2006","journal-title":"Proc Haifa Verification Conf"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/SESS.2007.2"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/MS.2012.13"},{"key":"ref44","first-page":"109","article-title":"A classification for model-based security testing","author":"felderer","year":"2011","journal-title":"Proc Adv Syst Testing Validation Lifecycle"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1002\/stvr.1580"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1016\/j.jss.2013.02.061"},{"key":"ref8","author":"myers","year":"2004","journal-title":"The Art of Software Testing"},{"key":"ref7","author":"maurer","year":"2015","journal-title":"Autonomous Driving Technical Legal and Social Aspects"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.3390\/info10040148"},{"key":"ref4","year":"2020"},{"key":"ref3","year":"2013"},{"key":"ref6","year":"2016","journal-title":"Bluetooth core specification v5 0"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/IEEESTD.2021.9363693"},{"key":"ref100","doi-asserted-by":"publisher","DOI":"10.1109\/DATE.2012.6176485"},{"key":"ref101","first-page":"1","article-title":"Intelligent test-case generation for automated validation of TCUS","author":"belmon","year":"2012","journal-title":"Proc Int CTI Symp Innov Automotive Transmiss"},{"key":"ref40","author":"shafique","year":"2010","journal-title":"A Systematic Review of Model Based Testing Tool Support"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1145\/1459352.1459354"},{"key":"ref34","year":"2020","journal-title":"Matlab"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1201\/b11321-2"},{"key":"ref36","author":"felderer","year":"2014","journal-title":"A Taxonomy of Risk-Based Testing Volume International Journal on Software Tools for Technology Transfer"},{"key":"ref31","year":"2020","journal-title":"Simulink - Simulation and Model- Based Design"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1016\/0167-6423(87)90035-9"},{"key":"ref33","year":"2022","journal-title":"Testing ECUS and Networks With CANOEL"},{"key":"ref32","year":"2020","journal-title":"Stateflow Model and simulate decision logic using state machines and flow charts"},{"key":"ref39","author":"utting","year":"2014","journal-title":"Practical Model-Based Testing A Tools Approach"},{"key":"ref38","first-page":"1","article-title":"Certified automotive software tester: Certified tester foundation level specialist","volume":"2","year":"2017","journal-title":"German Testing Board"},{"key":"ref24","author":"rumbaugh","year":"2004","journal-title":"Unified Modeling Language Reference Manual"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1145\/302405.302640"},{"key":"ref26","first-page":"1","article-title":"The SysML modelling language","volume":"9","author":"hause","year":"2006","journal-title":"Proc 15th Eur Syst Eng Conf"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/2492248.2492274"},{"key":"ref20","first-page":"31","article-title":"A survey on model-based testing approaches","author":"neto","year":"2007","journal-title":"Proc 22nd IEEE ACM Int Conf Automated Softw Eng"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1002\/stvr.456"},{"key":"ref21","first-page":"392","article-title":"One evaluation of model-based testing and its automation","author":"pretschner","year":"2005","journal-title":"Proc 27th Int l Conf Software Eng"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/ICST.2009.29"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/5.533956"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/ISORC.2002.1003693"},{"key":"ref200","doi-asserted-by":"publisher","DOI":"10.1145\/347324.348872"},{"key":"ref128","doi-asserted-by":"publisher","DOI":"10.3182\/20100712-3-DE-2013.00029"},{"key":"ref129","author":"zurich","year":"2010","journal-title":"Mogentes—Model-Based Generation of Test-Cases for Embedded Systems Modelling Languages Final Version"},{"key":"ref97","first-page":"78","article-title":"Prototype-based tests for hybrid reactive systems","author":"hahn","year":"2003","journal-title":"Proc 14th IEEE Int Workshop Rapid Syst Prototyping"},{"key":"ref126","article-title":"Defect-based quality assurance with defect models","author":"holling","year":"2016"},{"key":"ref96","year":"2018"},{"key":"ref127","doi-asserted-by":"publisher","DOI":"10.1109\/SATE.2017.11"},{"key":"ref99","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-70930-5_6"},{"key":"ref124","doi-asserted-by":"publisher","DOI":"10.1145\/2642937.2648622"},{"key":"ref98","first-page":"1","article-title":"An overview of hardware-in-the-loop testing systems at Visteon: SAE technical paper series","author":"nabi","year":"2004","journal-title":"Proc SAE World Congr"},{"key":"ref125","doi-asserted-by":"publisher","DOI":"10.1109\/ICST.2016.28"},{"key":"ref93","first-page":"625","article-title":"Extended automation method (EXAM) zur automatisierten funktionserprobung von Steuergeräten in der automobilindustrie","author":"thiel","year":"2008","journal-title":"INFORMATIK 2008 Beherrschbare Systeme—Dank Informatik Band 2"},{"key":"ref133","doi-asserted-by":"publisher","DOI":"10.1007\/s10009-004-0147-8"},{"key":"ref92","doi-asserted-by":"publisher","DOI":"10.1109\/RE.2010.49"},{"key":"ref134","first-page":"15","article-title":"Test case generation from formal models of cyber physical system","volume":"6","author":"zhang","year":"2013","journal-title":"Int J Hybrid Inf Technol"},{"key":"ref95","author":"meyn","year":"2012","journal-title":"Markov Chains and Stochastic Stability"},{"key":"ref131","doi-asserted-by":"publisher","DOI":"10.1002\/stvr.264"},{"key":"ref94","first-page":"351","article-title":"Automatisierter funktionaler steuergerätetest mit der extended automation method (EXAM)","author":"zitterell","year":"2010","journal-title":"INFORMATIK 2010 Service Science—Neue Perspektiven für die Informatik Band 2"},{"key":"ref132","doi-asserted-by":"publisher","DOI":"10.1002\/spe.2650"},{"key":"ref130","doi-asserted-by":"publisher","DOI":"10.1109\/ICECCS.1999.802856"},{"key":"ref91","first-page":"1","article-title":"Model-driven testing based on Markov chain usage models in the automotive domain","author":"siegl","year":"2009","journal-title":"Proc 12th Eur Workshop Dependable Comput"},{"key":"ref90","year":"2017"},{"key":"ref89","article-title":"Time partition testing: Systematischer test des kontinuierlichen Verhaltens von eingebetteten systemen","author":"lehmann","year":"2004"},{"key":"ref139","doi-asserted-by":"publisher","DOI":"10.1109\/SEAA.2014.70"},{"key":"ref86","doi-asserted-by":"publisher","DOI":"10.1109\/ICSTW.2010.10"},{"key":"ref137","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-64119-5_13"},{"key":"ref85","doi-asserted-by":"publisher","DOI":"10.1109\/ICST.2008.45"},{"key":"ref138","doi-asserted-by":"publisher","DOI":"10.1007\/s004500050132"},{"key":"ref88","doi-asserted-by":"publisher","DOI":"10.1145\/1138474.1138481"},{"key":"ref135","doi-asserted-by":"publisher","DOI":"10.1109\/IDAACS.2017.8095133"},{"key":"ref87","doi-asserted-by":"publisher","DOI":"10.1109\/DATE.2010.5457166"},{"key":"ref136","doi-asserted-by":"publisher","DOI":"10.1109\/IDAACS.2017.8095175"},{"key":"ref82","doi-asserted-by":"publisher","DOI":"10.1109\/AUTEST.2006.283767"},{"key":"ref144","doi-asserted-by":"publisher","DOI":"10.1016\/S0950-5849(00)00145-2"},{"key":"ref81","doi-asserted-by":"publisher","DOI":"10.1016\/j.entcs.2004.12.005"},{"key":"ref145","first-page":"43","article-title":"Test case generation for embedded automotive systems: A semantics preserving model transformation","volume":"10","author":"chimisliu","year":"2009","journal-title":"Practical Model-Based Testing"},{"key":"ref84","year":"2002"},{"key":"ref142","doi-asserted-by":"publisher","DOI":"10.1007\/978-0-85729-277-3"},{"key":"ref83","doi-asserted-by":"publisher","DOI":"10.4271\/2009-01-0151"},{"key":"ref143","author":"baier","year":"2008","journal-title":"Principles of Model Checking"},{"key":"ref140","doi-asserted-by":"publisher","DOI":"10.1109\/ICECCS.2001.930180"},{"key":"ref141","doi-asserted-by":"publisher","DOI":"10.1145\/318774.318939"},{"key":"ref80","author":"conrad","year":"2004","journal-title":"A systematic approach to testing automotive control software"},{"key":"ref79","doi-asserted-by":"publisher","DOI":"10.4271\/2004-01-1593"},{"key":"ref108","doi-asserted-by":"publisher","DOI":"10.4271\/2019-01-0111"},{"key":"ref78","doi-asserted-by":"publisher","DOI":"10.1109\/ICFEM.1997.630406"},{"key":"ref109","first-page":"1","article-title":"Model-based development and simulative verification of logical vehicle functions using executable un\/ece regulations","author":"neubauer","year":"2020","journal-title":"Proc Summer Simulation Conf"},{"key":"ref106","doi-asserted-by":"publisher","DOI":"10.4271\/2017-01-0006"},{"key":"ref107","doi-asserted-by":"publisher","DOI":"10.11128\/sne.29.tn.10472"},{"key":"ref75","first-page":"1","article-title":"Model-based testing of automotive electronic control units","author":"g\u00fchmann","year":"2005","journal-title":"Proc 3rd Int Conf Mater Test Test"},{"key":"ref104","doi-asserted-by":"publisher","DOI":"10.4271\/2017-01-0004"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.1109\/MC.2009.125"},{"key":"ref105","first-page":"1537","article-title":"Model-in-the-loop and software-in-the-loop testing of closed-loop automotive software with arttest","author":"hansen","year":"2017","journal-title":"Informatik"},{"key":"ref77","first-page":"169","article-title":"Tool-supported test case design for black-box testing by means of the classification-tree editor","volume":"93","author":"grochtmann","year":"1993","journal-title":"Proc EuroSTAR"},{"key":"ref102","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-39742-4_12"},{"key":"ref76","doi-asserted-by":"publisher","DOI":"10.1002\/stvr.4370030203"},{"key":"ref103","doi-asserted-by":"publisher","DOI":"10.4271\/2014-01-0188"},{"key":"ref71","first-page":"1","article-title":"Comprehensive experimental analyses of automotive attack surfaces","author":"checkoway","year":"2011","journal-title":"Proc Usenix Secur Symp"},{"key":"ref111","doi-asserted-by":"publisher","DOI":"10.1243\/09596518JSCE207"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2010.34"},{"key":"ref112","year":"2013","journal-title":"Un Regulation no 131—Uniform Provisions Concerning the Approval of Motor Vehicles With Regard to the Advanced Emergency Braking Systems (AEBS)"},{"key":"ref73","author":"sommer","year":"2023","journal-title":"Vehicle Network Platforms for Automotive Security Testing"},{"key":"ref72","article-title":"Remote exploitation of an unaltered passenger vehicle","author":"miller","year":"2015"},{"key":"ref110","author":"berger","year":"2010","journal-title":"Automating Acceptance Tests for Sensor- and Actuator based Systems on the Example of Autonomous Vehicles"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1109\/JSYST.2018.2881017"},{"key":"ref119","doi-asserted-by":"publisher","DOI":"10.1109\/MoDeVVa.2010.11"},{"key":"ref67","article-title":"Guidelines for performing systematic literature reviews in software engineering","author":"kitchenham","year":"2007"},{"key":"ref117","first-page":"2577","article-title":"Improving fault injection in automotive model based development using fault bypass modeling","author":"rana","year":"2013","journal-title":"Informatik angepasst an Mensch Organisation und Umwelt"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1016\/j.jss.2006.07.009"},{"key":"ref118","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-15651-9_16"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.3390\/s22239211"},{"key":"ref115","doi-asserted-by":"publisher","DOI":"10.1007\/s12239-018-0011-6"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-65722-2_14"},{"key":"ref116","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-24580-0_11"},{"key":"ref66","year":"2020","journal-title":"AUTOSAR AUTomotive Open System ARchitecture"},{"key":"ref113","first-page":"328","article-title":"Hesperia: Framework zur szenario-gestützten modellierung und entwicklung sensor-basierter systeme","author":"berger","year":"2009","journal-title":"Informatik 2009–Im Focus das Leben"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1145\/3339252.3340329"},{"key":"ref114","doi-asserted-by":"publisher","DOI":"10.1007\/11875567_28"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1145\/1998441.1998461"},{"key":"ref122","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-09099-3_1"},{"key":"ref123","doi-asserted-by":"publisher","DOI":"10.1016\/j.scico.2016.01.003"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1109\/CYBERSEC.2016.012"},{"key":"ref120","article-title":"Towards fault-based generation of test cases for dependable embedded software","author":"herzner","year":"2011","journal-title":"Softwaretechnik-Trends Band 31 Heft 3"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1109\/AERO.2015.7118959"},{"key":"ref121","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-24270-0_20"},{"key":"ref168","year":"2022"},{"key":"ref169","doi-asserted-by":"publisher","DOI":"10.1109\/DSN-W.2019.00025"},{"key":"ref170","author":"wittenberg","year":"2016","journal-title":"Automotive Vulnerability Detection System"},{"key":"ref177","article-title":"CARLA: An open urban driving simulator","author":"dosovitskiy","year":"2017","journal-title":"arXiv 1711 03938"},{"key":"ref178","first-page":"5","article-title":"ROS: An open-source robot operating system","volume":"3","author":"quigley","year":"2009","journal-title":"Proc ICRA Workshop Open Source Softw"},{"key":"ref175","doi-asserted-by":"publisher","DOI":"10.1109\/THS.2013.6699092"},{"key":"ref176","year":"2019","journal-title":"CVE-2019-14951"},{"key":"ref173","doi-asserted-by":"publisher","DOI":"10.4271\/2020-01-1291"},{"key":"ref174","doi-asserted-by":"publisher","DOI":"10.1145\/3230833.3230843"},{"key":"ref171","doi-asserted-by":"publisher","DOI":"10.4271\/2018-01-0013"},{"key":"ref172","doi-asserted-by":"publisher","DOI":"10.1145\/3309171.3309173"},{"key":"ref179","first-page":"96","article-title":"A concept of an attack model for a model-based security testing framework: Introducing a holistic perspective of cyberattacks in software engineering","author":"volkersdorfer","year":"2020","journal-title":"Proc 14th Int Conf Emerg Secur Inf Syst Technol"},{"key":"ref180","first-page":"12","article-title":"Adam: An adversary-driven attack modelling framework for model-based security testing","volume":"14","author":"volkersdorfer","year":"2021","journal-title":"International Journal on Advances in Security"},{"key":"ref181","doi-asserted-by":"publisher","DOI":"10.1109\/CSCI54926.2021.00179"},{"key":"ref188","doi-asserted-by":"publisher","DOI":"10.1109\/COMPSAC.2013.5"},{"key":"ref189","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-16722-6_12"},{"key":"ref186","first-page":"137","article-title":"Automation in automotive security by using attacker privileges","author":"d\u00fcrrwang","year":"2021","journal-title":"Proc 19th ESCAR"},{"key":"ref187","year":"2019","journal-title":"Common Vulnerability Scoring System v3 0 Specification Document"},{"key":"ref184","article-title":"Methodik zur angriffsmodellierung für security-tests","author":"volkersdorfer","year":"2020"},{"key":"ref185","author":"sommer","year":"2019","journal-title":"IEEM-HsKA\/AAD Automotive Attack Database (AAD)"},{"key":"ref182","doi-asserted-by":"publisher","DOI":"10.1145\/2744769.2744906"},{"key":"ref183","doi-asserted-by":"publisher","DOI":"10.1145\/3322129"},{"key":"ref148","doi-asserted-by":"publisher","DOI":"10.1016\/j.jss.2013.11.1096"},{"key":"ref149","doi-asserted-by":"publisher","DOI":"10.1145\/2744769.2747935"},{"key":"ref146","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2004.1317431"},{"key":"ref147","doi-asserted-by":"publisher","DOI":"10.5455\/jjcit.71-1442380075"},{"key":"ref155","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2018.04.008"},{"key":"ref156","doi-asserted-by":"publisher","DOI":"10.1109\/ICSTW50294.2020.00019"},{"key":"ref153","first-page":"113","article-title":"Formalising systematic security evaluations using attack trees for automotive applications","author":"cheah","year":"2017","journal-title":"Proc IFIP Int Conf Inf Secur Theory Pract"},{"key":"ref154","doi-asserted-by":"publisher","DOI":"10.1016\/j.vehcom.2017.02.008"},{"key":"ref151","first-page":"21","article-title":"Attack trees","volume":"24","author":"schneier","year":"1999","journal-title":"Dr Dobb’s J"},{"key":"ref152","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-45931-8_18"},{"key":"ref150","year":"1989"},{"key":"ref159","article-title":"Security evaluation of damper system’s communication and update process: Threat modeling using vehicleLang and securiCAD","author":"ekelund","year":"2021"},{"key":"ref157","doi-asserted-by":"publisher","DOI":"10.4204\/EPTCS.271.7"},{"key":"ref158","doi-asserted-by":"publisher","DOI":"10.5220\/0007412104790486"},{"key":"ref166","doi-asserted-by":"publisher","DOI":"10.5220\/0007247901750182"},{"key":"ref167","doi-asserted-by":"publisher","DOI":"10.1145\/3230833.3232799"},{"key":"ref164","year":"2021","journal-title":"Securicad Enterprise"},{"key":"ref165","article-title":"A survey of remote automotive attack surfaces","author":"miller","year":"2014"},{"key":"ref162","doi-asserted-by":"publisher","DOI":"10.1145\/3366030.3366070"},{"key":"ref163","year":"2014","journal-title":"The Penetration Testing Execution Standard"},{"key":"ref160","article-title":"Validating vehicleLang, a domain-specific threat modelling language, from an attacker and industry perspective","author":"schoot","year":"2020"},{"key":"ref161","doi-asserted-by":"publisher","DOI":"10.1109\/IVS.2019.8814172"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/3360664.3360729"},{"key":"ref12","first-page":"281","article-title":"Security in the software development lifecycle","author":"assal","year":"2018","journal-title":"Proc 14th Symp Usable Privacy Secur"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/2631890.2631891"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/3386723.3387883"},{"key":"ref11","year":"2021"},{"key":"ref10","year":"2016"},{"key":"ref17","first-page":"172","article-title":"Improving model-based testing in automotive software engineering","author":"markthaler","year":"2018","journal-title":"Proc IEEE\/ACM 40th Int Conf Softw Eng Softw Eng Pract Track"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/ICCW.2019.8757155"},{"key":"ref19","first-page":"1","article-title":"ISTQB foundation level certified model-based tester: Syllabus","volume":"2015","author":"tester","year":"2015","journal-title":"Journal of International Software Testing Qualifications Board"},{"key":"ref18","year":"2021","journal-title":"Un Regulation no 155—Uniform Provisions Concerning the Approval of Vehicles With Regards to Cyber Security and Cyber Security Management System"},{"key":"ref2","year":"1993"},{"key":"ref1","author":"winning","year":"2020","journal-title":"Number of Automotive ECUs Continues to Rise"},{"key":"ref191","article-title":"Model-based security testing in automotive industry","author":"kastebo","year":"2017"},{"key":"ref192","doi-asserted-by":"publisher","DOI":"10.1109\/VNC.2009.5416378"},{"key":"ref190","article-title":"A formal security model for verification of automotive embedded applications","author":"pedroza","year":"2010","journal-title":"Proc SAFA Annu Workshop Formal Techn (SAFA)"},{"key":"ref199","year":"2006"},{"key":"ref197","first-page":"21","article-title":"Modular risk assessment for the development of secure automotive systems","author":"eichler","year":"2015","journal-title":"Proc 31st VDI\/VW joint Conf Automot Secur"},{"key":"ref198","article-title":"Steigerung der betriebssicherheit von personenkraftwagen durch bedrohungsanalysen für die informationssicherheit","author":"d\u00fcrrwang","year":"2022"},{"key":"ref195","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-98938-9_14"},{"key":"ref196","doi-asserted-by":"publisher","DOI":"10.1109\/GLOCOM.2008.ECP.369"},{"key":"ref193","doi-asserted-by":"publisher","DOI":"10.1145\/3488904.3493377"},{"key":"ref194","doi-asserted-by":"publisher","DOI":"10.1109\/COMPSAC.2008.72"}],"container-title":["IEEE Access"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6287639\/10005208\/10143175.pdf?arnumber=10143175","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,6,9]],"date-time":"2023-06-09T13:34:52Z","timestamp":1686317692000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10143175\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023]]},"references-count":207,"URL":"https:\/\/doi.org\/10.1109\/access.2023.3282176","relation":{},"ISSN":["2169-3536"],"issn-type":[{"value":"2169-3536","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023]]}}}